note 75901 deleted from function.mysql-query by sp
| From: | sp@php.net | Date: | Sat, 24 May 2008 20:57:49 +0000 |
| Subject: | note 75901 deleted from function.mysql-query by sp | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-139712@lists.php.net to get a copy of this message | ||
Note Submitter: a at a dot com
----
###The reason that multiple queries are not supported is to help prevent exploits.###
For example, the user could enter something like:
"; DELETE * FROM users;
in the name field of a form, which would erase everything in the table when the query is executed.
By allowing mysql_query to support only single commands, this hole is closed.